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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )K Responsive to communication(s) filed on 24 January 2000 . 
2a)D This action is FINAL. 2b)K This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
Disposition of Claims 

4) £3 Claim(s) 1-32 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) IEI Claim(s) 1-32 is/are rejected. 

7) 0 Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

1 1) D The proposed drawing correction filed on is: a)D approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§119 and 120 

1 3) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121. 
Attachment(s) 

1 ) ^ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) Paper No(s). . 

2) ^ Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) O Notice of Informal Patent Application (PTO-1 52) 

3) □ Information Disclosure Statement(s) (PTO-1449) Paper No(s) . 6) □ Other: 
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1 . This office action is in response to Amendment filed 12/1 1/01 . Amended claims 
1-29 are pending. The rejection is cited as stated below. 

2. Claims 1-6,8-13,15-22,24-29,31 and 32 are rejected under 35 U.S.C. § 102[e] as 
being anticipated by Cohen et al [Cohen 6,389,462 B1] 

3. As per claims 1 and 17 Cohen discloses a computer-readable medium having 
computer-executable instructions for controlling access to a desired resource hosted on 
a destination server [Cohen abstract] comprising the steps of: 

(a) receiving handshaking packets from a client machine intended to begin 

a session with the destination server [Fig 3-6, col 7 lines 1-10, col 8 line 59-col 9 line 
18,col 13 line 36-col 14 line 20, col 15 lines 9-34]; 

(b) redirecting network communications, including the steps of: 

redirecting the handshaking packets by rewriting (i.e.: proxying) the destination 
address in the handshaking packets IP headers to route the packets to an access 
controlling web server [Fig 3, col 8 line 53-col 9 line 18]; 

receiving a content request packet from the client machine destined for the 
destination server intended to retrieve the desired resource (i.e.: destination port) from 
the destination server; and redirecting the content request packet by rewriting the 
destination address in the packet IP header to route the packet to the access controlling 
web server [Fig 3-6, col 3 line 47-col 4 line 27,col 14 lines 21 -45, col 15 lines 35-67, col 
16 line 1-col17 line 5]; 

(c) receiving a response from the access controlling web server [col 6 lines 23- 
46]; and 
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(d) controlling access of the client machine to the desired resource based on the 
response from the access controlling web server [col 8 line 59-col 9 line 18]. 

Thus, the system and method of claims 1 ,17 is anticipated by the prior art. 

4. As per claims 2,18 Cohen discloses establishing a connection between the client 
machine and the destination server if the response indicates that access to the desired 
resource is allowable [col 13 lines 37-col 14 line 20]. 

5. As per claims 3,19 Cohen discloses the content request packet comprises a GET 
URL packet [col 8 lines 1 1-52, col 15 lines 35-55]. 

6. As per claims 4,20 Cohen discloses the response indicates that access to the 
desired resource is allowable if the access controlling web server does not recognize 
the URL of the GET URL packet [col 5 lines 10-31], 

7. As per claims 5,21 Cohen discloses the step of refusing a connection to the 
destination server, and establishing instead a connection between the client machine 
and the access controlling web server if the response is that the access controlling web 
server recognizes the URL of the GET LTRL packet as inherent feature or proxy or 
redirect request. 

8. As per claims 6,13,22,29 Cohen discloses the step of establishing a connection 
between the client machine and the destination server comprises: resending the 
handshaking packets and GET URL packet to the destination server transparently with 
respect to the client machine [col 8 line 53-col 9 line 18]. 
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9. As per claims 8,1 5,24,31 Cohen discloses the step of determining whether to 
redirect network communications based on the content of a handshaking packet [Fig 3- 
6]. 

10. As per claims 9,16,25,32 Cohen discloses the step of determining whether to 
redirect network communications comprises deciding to redirect network 
communications if the handshaking packet is a SYN packet directed to port 80 on the 
destination server [col 6 lines 47-67]. 

11. As per claims 10,26 Cohen discloses the response indicates that access to the 
desired resource is allowable if the access controlling web server recognizes the URL of 
the GET URL packet. 

12. As per claims 1 1 ,27 Cohen discloses the step of refusing a connection to the 
destination server, and establishing instead a connection between the client machine 
and the access controlling web server if the response indicates that the access 
controlling web server does not recognize the URL of the GET URL packet [col 5 lines 
10-31]. 

13. As per claims 12,28 Cohen discloses the access controlling web server is an 
RSACi Web Server as inherent feature of Web server. 

Claims 7,14,23,30 are rejected under 35 U.S.C. § 103 as being obvious over Cohen et 
al [Cohen 6,389,462 B1] in view of the what was well-known in the art. 

14. As per claims 7,14,23,30 Cohen discloses the invention as describe above. 
However Cohen did not detail embedding an identity token readable by the access 
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controlling web server in the GET URL packet, wherein the identity token uniquely 
identifies the client machine. 

It is well-known in the art that an identifier or other information could be 
embedded into a GET request such [Chung col 2 lines 44-63] 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to implement the Cohen's apparatus by incorporate the 
applet or token which is embedded in GET packet wherein the applet or token 
contained a client identifier or unique address. Doing so would provide a security and 
efficiency for accessing information on Internet. 

Thus, the system and method of claims 1-32 is obvious in view of the references. 

15. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to examiner Thong Vu, whose telephone number is (703)-305-4643. 
The examiner can normally be reached on Monday-Thursday from 8:00AM- 4:30PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Mark Rinehart, can be reached at (703) 305-4815. 

Any inquiry of a general nature or relating to the status of this application should be 
directed to the Group receptionist whose telephone number is (703) 305-3900. 
Any response to this action should be mailed to: 
Commissioner of Patent and Trademarks 
Washington, D.C. 20231 
or faxed: After Final (703) 746-7238 

Official: (703) 746-7239 
Non-Official (703) 746-7240 
Hand-delivered responses should be brought to Crystal Park 1 1,2121 Crystal Drive, 
Arlington. VA., Sixth Floor (Receptionist). 
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